Your data is yours.
Every line of that sentence is engineered.
Privacy is a feature — not a checkbox. Here's what we do to keep your career data safe, and what you can do to verify it.
What we will (and won't) do
Your data stays yours
Every resume, cover letter, and portfolio you build belongs to you. Export anytime, delete anytime.
Encrypted at rest + transit
AES-256 at rest. TLS 1.3 in transit. End-to-end encrypted for session tokens.
Never sold. Never leaked.
We don't sell your data. We don't share it with partners. We don't train third-party models on it.
Geo-resilient hosting
Cloudflare + Firebase across multiple regions. 99.99% uptime SLA on Career plan.
SOC 2 in progress
Type I audit completed Q4 2025. Type II in progress. ISO 27001 application filed.
GDPR + DPDP ready
Full data processing agreements available. Indian DPDP Act compliant. CCPA-ready.
Regional data residency
EU users: data stored in EU. Indian users: data in Mumbai region. Opt-in US residency.
Transparent incidents
Any security incident: disclosure within 72 hours. No hiding, no spin. Full post-mortem public.
Access audits
All employee access to user data is logged, reviewed quarterly, and available to you on request.
Certifications + standards
SOC 2 Type I
Certified · Dec 2025Security, availability, confidentiality controls audited by a third party.
SOC 2 Type II
In progress · Q2 2026Extended 6-month effectiveness audit currently underway.
GDPR
CompliantFull DPO + DPA available. EU data residency + subject rights honored.
Indian DPDP Act
CompliantData principal rights + grievance officer + data retention policies enforced.
ISO 27001
Application filedISMS framework in place. Audit scheduled for Q3 2026.
CCPA
CompliantCalifornia Consumer Privacy Act rights honored for all US users.
Read the fine print yourself
Privacy Policy
What we collect, what we do with it, what we don't.
Terms of Service
The legal agreement between you and us.
GDPR compliance
EU-specific rights and our DPA.
Cookie Policy
Which cookies we set, and how to opt out.
Status page
Real-time uptime + incidents, 90-day history.
Security disclosure
Responsible disclosure for researchers.